let enforce-security end with non-zero when grep-ing output